Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
File:                     MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json)
Hash identifier:          G+Lxcb19ZJmktWrcBnRpYugOg8AsLCZeBL8ibJ506y0=
Subject key identifier:   37:B3:67:57:20:32:1B:16:98:AF:86:9F:0A:22:09:36:A6:A3:5A:20
Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C
Certificate issuer:       /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C
Certificate serial:       104D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
Manifest number:          1034
Signing time:             Sat 28 Feb 2026 17:32:36 +0000
Manifest this update:     Sat 28 Feb 2026 17:32:35 +0000
Manifest next update:     Sat 07 Mar 2026 17:32:35 +0000
Files and hashes:         1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: asbZZglbJM+JlcRy3lBKM/98TPi461jHQSazGzwKjFg=)
                          2: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nmmwbRgeg6x+DwLWt0s6OMWtS0zyAxCJ4V/dXBc7nRE=)
                          3: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=)
                          4: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=)
                          5: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4173 (0x104d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C
        Validity
            Not Before: Feb 28 17:32:35 2026 GMT
            Not After : Mar  7 17:32:35 2026 GMT
        Subject: CN=69a326b3-6813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:bf:f5:84:74:45:7f:66:fa:e9:6c:06:f9:
                    97:b3:0b:4c:54:db:a1:92:35:05:ad:2d:ba:24:a0:
                    38:80:3d:f0:32:33:09:98:6a:7a:e2:55:d8:97:6d:
                    88:18:d5:45:59:e9:f5:1e:85:53:63:2c:fa:fb:7a:
                    7c:4f:2b:fd:ac:e3:a1:28:ac:41:93:33:4d:37:6e:
                    43:f6:cd:06:42:be:21:70:d5:6c:b9:e7:09:f2:05:
                    92:9e:74:3d:97:8e:97:d3:74:54:33:fc:20:2b:e6:
                    45:5e:43:f9:7a:6a:1e:a3:76:20:87:8d:06:89:d5:
                    11:e2:8d:c9:8e:f0:67:e0:7e:99:fd:56:49:1d:0c:
                    f0:35:aa:dc:57:bc:45:6a:99:f5:e6:b9:cc:b5:b6:
                    89:18:86:e3:20:a6:bf:74:31:c7:ef:5c:97:cf:68:
                    bf:c6:64:fd:0b:16:02:99:ee:f4:0c:99:bc:db:6a:
                    c5:f7:54:d0:c6:71:13:59:f6:fc:f6:f8:64:09:73:
                    18:cc:88:96:06:57:6d:3b:ce:e5:50:c6:d2:56:06:
                    55:be:41:17:6c:8d:c2:ac:1f:26:bd:ae:5e:e0:a6:
                    9c:46:55:3c:fc:a1:1f:9c:b9:8f:6c:4a:75:e9:49:
                    05:82:b0:75:4b:58:82:a4:b0:e5:e7:fc:06:c4:d9:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B3:67:57:20:32:1B:16:98:AF:86:9F:0A:22:09:36:A6:A3:5A:20
            X509v3 Authority Key Identifier:
                keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:43:fc:d2:71:c1:10:fe:ff:f3:1c:fe:04:55:8e:fe:9f:28:
         08:3f:85:03:13:03:49:c0:77:62:2c:c2:2a:2b:86:6f:a2:da:
         ee:6a:f0:e3:8c:0e:44:82:f4:0f:bc:dc:86:7f:5c:22:1e:67:
         93:c2:31:0b:70:47:3b:17:c6:d4:54:06:63:88:e7:68:33:2f:
         17:6f:cc:ee:d6:89:f3:32:88:18:8f:9b:bf:9c:11:e4:70:76:
         82:fd:0a:91:7e:6d:c8:c9:17:60:61:b4:17:8e:cd:4f:40:cd:
         81:d6:ec:7d:52:8a:4e:88:2c:58:0b:ed:2a:c8:7f:d7:97:6c:
         36:27:25:db:93:26:7d:0a:96:80:7d:d0:2d:d8:2f:d6:74:cb:
         60:4d:9f:8c:f0:a8:98:94:69:94:14:7c:cd:f3:c9:d1:c4:d9:
         de:16:37:f8:5f:14:7b:c8:df:d0:2c:dc:73:47:66:0e:12:6a:
         38:dc:dd:80:bf:c0:70:09:da:99:ed:4a:31:1f:56:ac:01:c2:
         23:e1:80:c0:96:86:0e:b3:38:d2:b1:a1:ca:d2:92:7d:72:37:
         44:59:3c:0f:f7:88:c2:f1:60:b0:db:ec:ca:4f:6d:55:86:d3:
         f7:64:a7:35:d0:40:f9:b7:55:bc:7b:e0:39:0a:78:5f:fe:95:
         74:23:84:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:51 2026 by rpki-client